BaselineWatch
58190 CVEs · 127 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,190 New, 24 h1,445 Changed, 24 h2,507 In KEV127 Public exploit1,566 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-48561 9.6 critical 1.0% microsoft, microsoft edge copilot for android, microsoft edge copilot for ios Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to execute code over a network. 13 h ago
CVE-2026-72984 8.8 high 1.0% microsoft, microsoft edge (chromium-based), microsoft edge for android, microsoft edge for ios Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. 13 h ago
CVE-2026-65802 7.4 high 1.0% microsoft, edge_chromium External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. Fri 23 Oct
CVE-2026-58296 7.1 high 1.0% microsoft, edge_chromium Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. Sun 25 Oct
CVE-2026-58297 7.1 high 1.0% microsoft, edge_chromium Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network. Sun 25 Oct
CVE-2026-58523 6.5 medium 1.0% microsoft, edge_chromium Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network. Sun 25 Oct
CVE-2026-58299 7.5 high 0.00% microsoft, edge_chromium Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network. Sun 25 Oct
CVE-2026-66310 7.1 high 0.00% microsoft, edge External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. Fri 23 Oct
CVE-2026-58300 5.5 medium 0.00% microsoft, edge_chromium Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. Sun 25 Oct
CVE-2026-58522 5.5 medium 0.00% microsoft, edge_chromium Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. Sun 25 Oct
CVE-2026-62828 5.4 medium 0.00% microsoft, edge Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network. Sat 24 Oct

11 of 11

Download these 11 as CSV · subscribe to this list.

EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.